5 matches found
CVE-2026-100852
AzuraCast before 0.23.8 contains a command injection vulnerability in the Liquidsoap config generation for live recording that fails to quote the streamer username in process.run calls. Authenticated station users with Streamers and Profile permissions can set a username containing shell...
CVE-2026-100852 AzuraCast before 0.23.8 Command Injection via Streamer Username
AzuraCast before 0.23.8 contains a command injection vulnerability in the Liquidsoap config generation for live recording that fails to quote the streamer username in process.run calls. Authenticated station users with Streamers and Profile permissions can set a username containing shell...
EUVD-2026-87836
AzuraCast before 0.23.8 contains a command injection vulnerability in the Liquidsoap config generation for live recording that fails to quote the streamer username in process.run calls. Authenticated station users with Streamers and Profile permissions can set a username containing shell...
Vulnerability of EVlink City’s parking charging station software. EVlink Parking and EVlink Smart Wallbox are vulnerable due to the lack of measures taken to protect the website structure, allowing attackers to impersonate users who control the charging stations.
Vulnerability of EVlink City parking charging stations’ software. The existence of EVlink Parking and EVlink Smart Wallbox stems from the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to impersonate a user controlling the...
Vulnerability of EVlink City’s parking charging station software. EVlink Parking and EVlink Smart Wallbox are vulnerable due to the lack of measures taken to protect the website structure, allowing attackers to impersonate users who control the charging stations through cross-site scripting.
Vulnerability of EVlink City parking charging stations’ software. The existence of EVlink Parking and EVlink Smart Wallbox stems from the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to impersonate a user who is controlling t...